Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: qXbAkGuWmh5BZhhWWQ4VaJN4pFhg/D3nm0oxy7PXbMU=
Subject key identifier: F1:6C:62:8A:B4:6A:41:DC:F6:42:50:FD:0F:59:9A:F8:51:06:1A:55
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 0196789FA93A70BC17DC4A3638229AF00D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 13C4
Signing time: Sun 27 Apr 2025 19:00:51 +0000
Manifest this update: Sun 27 Apr 2025 19:00:51 +0000
Manifest next update: Mon 28 Apr 2025 19:00:51 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: q+yT1lI+YRtiHF5k4QW2awmmAo1gVX6Ie3UZkKN7VW4=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:a9:3a:70:bc:17:dc:4a:36:38:22:9a:f0:0d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Apr 27 19:00:51 2025 GMT
Not After : Apr 28 19:00:51 2025 GMT
Subject: CN=f16c628ab46a41dcf64250fd0f599af851061a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:22:6c:da:e2:60:e9:5b:74:fb:bc:bc:ef:
9c:d7:45:9b:a8:9b:9b:ae:9d:e7:ea:92:b5:27:f9:
f3:a7:08:21:96:f0:e3:bb:9a:51:d1:d2:2f:d0:5a:
ba:8d:b3:82:a4:47:8d:e0:e2:ba:68:ae:0d:dc:ad:
c1:e8:a0:f3:a4:81:d3:25:70:7f:47:0f:1c:18:eb:
5f:4e:b2:66:25:38:f7:ed:0a:06:3c:a9:a5:a9:14:
23:a5:75:2b:40:fa:c8:62:5d:85:1e:71:9d:45:f1:
50:f1:1f:bd:f6:c6:b1:ad:4b:f9:e4:e7:25:53:2e:
ad:54:7a:aa:c1:d9:80:0c:06:4f:e3:61:ae:3d:8c:
75:9c:d5:75:a1:c6:7b:7a:69:60:92:ca:d1:79:6e:
06:47:f7:61:ea:aa:7a:d9:c6:e0:62:05:07:0e:94:
d5:03:14:2f:4f:a7:f3:5b:3f:c5:37:5c:06:c0:3a:
91:65:54:c7:8c:62:89:86:7c:ad:35:21:96:e1:0a:
56:0b:d7:ff:e1:85:20:f5:b7:00:2d:af:26:fe:b4:
74:62:97:b1:8a:f5:7d:f1:8e:e3:99:ae:06:40:e0:
8f:df:f4:57:97:db:56:ba:e3:f5:bb:24:1b:2c:c6:
4b:14:2d:af:74:3b:0c:0f:1b:a6:4f:e9:86:04:4a:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:62:8A:B4:6A:41:DC:F6:42:50:FD:0F:59:9A:F8:51:06:1A:55
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bc:ee:52:67:e9:ef:9b:e7:e0:cf:e6:ea:bf:69:08:1c:43:
93:0c:38:af:22:0f:1e:b8:30:f9:06:57:4a:c1:a9:b0:8d:74:
8d:23:86:84:a9:53:3b:56:e2:7f:14:bb:dc:56:c0:00:6f:a5:
1e:c8:81:a9:de:2d:16:57:b4:9b:ca:94:40:6e:bb:50:a0:9a:
44:cd:91:4a:f3:dc:69:a0:89:68:41:fd:35:dd:9a:1a:7d:09:
77:bd:0d:2f:c6:02:63:51:51:f7:bd:9d:1e:cd:96:91:d8:23:
70:51:1e:b5:66:63:54:cb:57:32:f7:93:87:02:03:54:c1:95:
52:6c:51:42:3d:18:15:44:69:a0:80:86:67:84:b8:17:99:a3:
d5:3c:09:3b:5f:a0:b7:04:92:e7:7a:96:f5:bb:b6:e4:86:75:
f6:8d:5d:18:df:32:19:b5:dc:15:84:72:40:91:12:9c:13:88:
6f:c9:11:63:8c:23:f9:d5:f2:ca:66:7c:68:24:e3:b9:11:4b:
38:fb:4d:d3:1a:de:dc:02:0a:06:13:b2:39:0c:93:bc:a2:30:
f0:cc:97:62:c6:36:4d:43:f9:d6:a7:cd:22:eb:37:40:69:91:
3d:f8:4e:92:c8:f4:94:db:f9:04:d6:ca:99:68:c0:9b:77:f5:
6a:9a:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:28:33 2025 by rpki-client